Privacy Policy
Last updated: October 7, 2026
1. Who we are
FindLeadly (findleadly.com) helps users find local business leads, such as businesses without a website or with a weak Google profile. FindLeadly is operated by Hoti International FZCO, Dubai, United Arab Emirates ("we", "us").
Questions about this policy or your data: info@findleadly.com.
2. Data we collect
- Account data: your email address and, if you choose, your name. If you sign up with a password, it is stored only in hashed form by our authentication provider.
- Google sign-in: if you sign in with Google, we receive your name, email address and profile picture from Google (scopes: openid, email, profile). We do not get access to your Gmail, contacts, calendar or any other Google data.
- Usage data: your searches (city, country, niche, filters), the leads you save, notes and statuses you add, and usage counters needed to enforce plan limits.
- Technical data: IP address, browser type and request logs, used for security, abuse prevention and rate limiting.
- Billing data: if you buy a paid plan, payments are processed by Stripe. We receive your subscription status and plan, but we do not store payment card data.
3. Business lead data
Lead search results come from the Google Places API and include public business information such as business name, address, category, rating, review count, opening hours, website and a Google Maps link. We do not intentionally collect phone numbers in the current product. Search results may be cached for a short time to reduce repeated API requests.
4. How we use your data
- To create and secure your account and let you sign in.
- To run lead searches and show, save and export your leads.
- To enforce plan limits and prevent abuse.
- To process subscriptions and send service-related emails (for example password resets).
- To understand and improve how the product is used.
We do not sell your personal data and we do not use it for third-party advertising.
5. Service providers
We share data only with providers that help us run FindLeadly:
- Supabase — authentication and database
- Google — Google sign-in (OAuth) and the Google Places API for lead search
- Vercel — website hosting
- Cloudflare — DNS and network services
- Stripe — payment processing for paid plans
- Microsoft Clarity — anonymous website usage analytics
These providers may process data outside your country, including in the United States. Google's use of data is described in the Google Privacy Policy.
6. Cookies and local storage
We use browser storage to keep you signed in. Microsoft Clarity uses cookies to measure how visitors use the website. You can block cookies in your browser settings; the app may not work without sign-in storage.
7. Data retention
We keep your account data while your account exists. When you ask us to delete your account, we delete your personal data, except where we must keep records for legal, tax or security reasons. Technical logs are kept only as long as needed for security and cost control.
8. Your rights
You can ask us to access, correct, export or delete your personal data, or object to its processing. Email us at info@findleadly.com. Depending on where you live (for example the EU/EEA or UK), you may also have the right to complain to a data protection authority.
9. Security
We use encrypted connections (HTTPS), access controls and database row-level security to protect your data. No online service can be 100% secure, but we work to protect your information.
10. Children
FindLeadly is a business tool and is not intended for anyone under 18.
11. Changes
We may update this policy from time to time. The latest version is always available on this page, with the date at the top.
12. Contact
Hoti International FZCO
Dubai, United Arab Emirates
Email: info@findleadly.com